—
GO-2025-3649
Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet
Quick fix
GO-2025-3649 — github.com/rancher/fleet: upgrade to the fixed version with the command below.
go get github.com/rancher/fleet@v0.10.12Details
Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/rancher/fleet
Introduced in:
0.9.0-rc.1Fixed in: 0.10.12Fix
go get github.com/rancher/fleet@v0.10.12References
- https://github.com/rancher/fleet/security/advisories/GHSA-xgpc-q899-67p8[ADVISORY]
- https://github.com/rancher/fleet/pull/3571[FIX]
- https://github.com/rancher/fleet/pull/3572[FIX]
- https://github.com/rancher/fleet/pull/3573[FIX]
- https://github.com/rancher/fleet/releases/tag/v0.10.12[WEB]
- https://github.com/rancher/fleet/releases/tag/v0.11.7[WEB]
- https://github.com/rancher/fleet/releases/tag/v0.12.2[WEB]